Propuesta de un modelo híbrido basado en las metodologías Magerit E ISO 27001 para controlar amenazas internas identificadas en la intranet de la Facultad de Informática y Electrónica.

Abstract

This project proposes a hybrid model based on the Magerit and ISO 27001 methodologies, which allow managing information security focusing on the most critical risks. Based on studies and research on both standards, the most relevant characteristics of their procedures were established through a comparative analysis, which allowed selecting the best scoring standard in each stage, proposing a model that can be applied to any organization. Knowing the initial situation of the Faculty of Informatics and Electronics of the Escuela Superior Politécnica de Chimborazo, where the study was conducted, the hybrid model composed of 7 stages starts with the preliminary activities and continue with the risk analysis to determine the assets and their threats identified with high risk level and implement the appropriate control to keep the information complete, confidential and available, using a simulated scenario in GNS3, allowing the comparison of the pre and post implementation of the proposed hybrid model, revealing the reduction of the risk level of occurrence of threats by 65. 38% and with the use of the statistical method for data analysis T-Student, it was possible to obtain a confidence level of 95%, allowing to recommend the full implementation in the Faculty of Informatics and Electronics.